This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json) Hash identifier: Gq7buMX0FN1aB1leiPyugmRr3/L0LDxJ2JzH/a3KUp8= Subject key identifier: E5:EE:34:23:0E:C3:A1:A3:02:91:5D:1B:D6:87:50:68:84:86:32:1D Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2 Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2 Certificate serial: 019B2E1DD7D97F2D2CB94CF6495284BB3452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 21:01:06 +0000 Manifest this update: Wed 17 Dec 2025 21:01:06 +0000 Manifest next update: Thu 18 Dec 2025 21:01:06 +0000 Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=) 2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: RimMzbQ+XCdkfjF9BMecm07EmTWHe39Ld/cAhpJ7JL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:d7:d9:7f:2d:2c:b9:4c:f6:49:52:84:bb:34:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2 Validity Not Before: Dec 17 21:01:06 2025 GMT Not After : Dec 18 21:01:06 2025 GMT Subject: CN=e5ee34230ec3a1a302915d1bd68750688486321d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:1d:75:fb:1a:f7:d1:00:ec:49:98:f2:5d: a5:69:4a:c8:bd:4f:88:92:0a:96:c5:a3:f4:c1:21: 4d:f6:8f:41:62:0d:4b:6a:3c:87:f4:0c:b0:f2:a8: 8a:e2:e7:e4:6a:8d:a2:6d:46:d3:1e:b1:af:b1:95: ac:b9:3e:ee:17:ea:43:1c:7d:81:18:1e:45:49:7c: a8:c4:0a:8e:c8:54:24:37:1b:42:48:26:45:5c:95: 24:c6:c5:5a:84:7a:8b:f8:5c:e9:18:7c:5c:11:91: 60:8b:97:7e:de:ba:48:a6:d2:3e:e4:bd:25:06:10: 5c:b0:91:ce:b6:9f:38:d6:6c:0e:e5:3a:ad:8a:71: 24:4f:a9:7f:94:78:f8:a7:48:3f:1a:6e:ba:50:b0: 40:bc:cf:f2:1d:2d:a3:13:da:3c:71:b9:bb:e5:5d: 35:1b:a2:6e:cd:65:df:5b:10:6a:27:b1:85:b9:66: 6b:01:00:4f:7b:80:10:f8:7d:4d:98:40:44:98:c1: d5:cb:38:c2:84:6c:24:bc:25:ac:af:4d:c5:ce:5d: 8e:7a:ef:49:2a:b3:75:6a:d4:07:cc:b8:e8:64:60: 89:35:cb:ba:26:49:41:67:4b:7c:bd:cb:8e:83:b5: 16:51:0a:38:f0:cc:6d:1c:04:cd:5e:f9:e9:b1:24: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EE:34:23:0E:C3:A1:A3:02:91:5D:1B:D6:87:50:68:84:86:32:1D X509v3 Authority Key Identifier: keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e1:ad:65:e3:77:a8:4b:cf:d9:fe:4d:40:a0:13:89:ec:dc: 6c:e0:46:6e:ed:7a:d7:dc:c1:27:d2:5c:94:b3:66:a1:b2:59: 6f:b0:51:5d:26:ac:11:68:9c:09:6f:20:58:9d:7b:38:ce:b6: 9e:60:b7:28:4d:0a:f6:74:29:e8:41:ac:87:4a:fc:c1:c5:80: f8:9b:96:77:36:ba:50:8b:38:32:30:91:ab:01:e2:02:81:99: 17:e8:bc:07:99:48:5e:82:21:3a:67:3d:ab:ee:2f:48:dc:fe: 38:22:6d:ec:e1:7e:3a:63:d1:4e:08:88:90:ea:3f:3f:07:79: e4:48:66:69:2b:66:4a:32:8d:2c:0d:a3:ad:f8:76:06:12:27: 89:6b:47:12:3d:9d:d6:04:f7:83:ee:49:ef:ce:e0:3e:63:c7: af:0a:b6:c3:cf:97:72:6a:bd:98:e4:c4:55:6e:7b:41:f5:63: 7a:41:ef:cd:21:97:fd:34:d0:44:45:ba:de:4e:c3:7a:d8:56: 99:33:ce:ac:20:9e:da:72:70:a9:1d:d5:33:88:71:7c:0f:38: 22:8e:eb:4e:e5:48:70:77:56:48:c0:b8:b5:1c:69:c7:9b:40: c2:44:db:82:76:90:ab:0b:e6:91:27:00:5c:15:0e:02:59:d6: 9b:5a:53:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHdfZfy0suUz2SVKEuzRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzAyNWE5ZDU1YmZkNjQzNzU3ZGE0ZDQ5OWRjZTE3MjAx Nzc0ZDIwHhcNMjUxMjE3MjEwMTA2WhcNMjUxMjE4MjEwMTA2WjAzMTEwLwYDVQQD EyhlNWVlMzQyMzBlYzNhMWEzMDI5MTVkMWJkNjg3NTA2ODg0ODYzMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMddfsa99EA7EmY8l2laUrIvU+I kgqWxaP0wSFN9o9BYg1LajyH9Ayw8qiK4ufkao2ibUbTHrGvsZWsuT7uF+pDHH2B GB5FSXyoxAqOyFQkNxtCSCZFXJUkxsVahHqL+FzpGHxcEZFgi5d+3rpIptI+5L0l BhBcsJHOtp841mwO5TqtinEkT6l/lHj4p0g/Gm66ULBAvM/yHS2jE9o8cbm75V01 G6JuzWXfWxBqJ7GFuWZrAQBPe4AQ+H1NmEBEmMHVyzjChGwkvCWsr03Fzl2Oeu9J KrN1atQHzLjoZGCJNcu6JklBZ0t8vcuOg7UWUQo48MxtHATNXvnpsSTg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXuNCMOw6GjApFdG9aHUGiEhjIdMB8GA1UdIwQY MBaAFM/AJanVW/1kN1faTUmdzhcgF3TSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhBbHFkVmJfV1EzVjlwTlNaM09GeUFYZE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGEyOTgtMDJjNy00ZDcxLThhZDMt OTUxZmQ3NWFjOWEyLzEvejhBbHFkVmJfV1EzVjlwTlNaM09GeUFYZE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZGEyOTgtMDJjNy00ZDcxLThhZDMtOTUxZmQ3NWFjOWEy LzEvejhBbHFkVmJfV1EzVjlwTlNaM09GeUFYZE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOGtZeN3 qEvP2f5NQKATiezcbOBGbu1619zBJ9JclLNmobJZb7BRXSasEWicCW8gWJ17OM62 nmC3KE0K9nQp6EGsh0r8wcWA+JuWdza6UIs4MjCRqwHiAoGZF+i8B5lIXoIhOmc9 q+4vSNz+OCJt7OF+OmPRTgiIkOo/Pwd55EhmaStmSjKNLA2jrfh2BhIniWtHEj2d 1gT3g+5J787gPmPHrwq2w8+Xcmq9mOTEVW57QfVjekHvzSGX/TTQREW63k7DethW mTPOrCCe2nJwqR3VM4hxfA84Io7rTuVIcHdWSMC4tRxpx5tAwkTbgnaQqwvmkScA XBUOAlnWm1pTfg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:35:23 2025 by rpki-client